Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AA5A48F8BA11EFBF1CAB71762E951A.roa
File: C2AA5A48F8BA11EFBF1CAB71762E951A.roa (raw, json)
Hash identifier: XWDUbRl5POSncw/HuVQrseJHFG0PU86ZGtSsRyKPFtI=
Subject key identifier: 4D:4D:43:85:5E:CC:AB:87:A9:CC:BE:EE:24:C8:73:DE:CC:24:AF:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 014295
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AA5A48F8BA11EFBF1CAB71762E951A.roa
Signing time: Tue 04 Mar 2025 05:37:28 +0000
ROA not before: Tue 04 Mar 2025 05:37:25 +0000
ROA not after: Tue 03 Mar 2026 05:37:25 +0000
asID: 984
IP address blocks: 156.224.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82581 (0x14295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Mar 4 05:37:25 2025 GMT
Not After : Mar 3 05:37:25 2026 GMT
Subject: CN=67c69198-aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:f4:bb:df:67:7a:6e:78:5e:0d:0d:8c:9a:
4b:c4:55:60:bb:c0:c6:62:ce:64:c1:52:ae:9f:1b:
bd:4d:de:db:36:23:4e:7a:fa:0a:e6:3d:c3:35:42:
02:0e:e6:1d:76:86:a2:d7:2a:a5:b6:ac:f4:fa:52:
c1:00:a6:3b:11:ef:6d:db:5f:4c:66:f7:03:18:09:
39:e3:c6:99:e1:96:79:1b:24:23:91:75:90:d7:6b:
21:f2:c0:57:17:51:2f:b7:46:e7:55:a9:ad:46:05:
0f:53:7f:02:8b:27:ac:ee:8b:0e:5e:1c:2e:e5:36:
81:7a:65:09:ea:df:82:d3:4a:e9:3e:fe:ee:06:a0:
5d:18:cd:bf:63:60:ba:ff:a1:35:18:0e:f6:e3:45:
a3:81:af:4b:a8:38:9b:89:cd:78:42:d6:ce:16:16:
6f:0f:73:34:6f:5c:3f:15:14:2b:f5:e2:ff:10:1b:
00:a0:50:ac:d8:a0:14:71:13:ba:42:02:f3:9e:64:
cc:08:db:16:f8:29:cb:09:98:59:29:3c:5f:d2:96:
3d:ea:93:97:41:b3:4d:48:99:57:aa:15:ba:30:90:
80:59:22:d8:04:a5:39:fa:8d:88:d4:a2:ce:75:84:
5f:51:64:95:06:24:4e:45:6a:6b:b9:48:49:dc:ba:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:43:85:5E:CC:AB:87:A9:CC:BE:EE:24:C8:73:DE:CC:24:AF:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2AA5A48F8BA11EFBF1CAB71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:22:c1:57:ed:3a:7d:82:72:ef:ac:57:19:a6:3c:d2:21:bf:
a1:3e:06:05:95:ba:df:a0:ee:63:e0:80:64:33:37:a4:70:38:
c9:d9:fe:76:9f:86:a8:d8:21:06:1c:da:0e:a6:84:88:c9:57:
96:ff:f5:c4:b9:6e:32:72:5b:89:56:00:92:d7:f9:83:86:00:
ac:ef:59:e2:e2:d2:fd:ee:98:09:3a:6a:a8:52:2a:30:ee:79:
a6:00:7e:66:ea:7e:84:51:66:48:be:11:12:b8:47:32:2f:cf:
98:59:c1:d1:10:47:61:05:dd:09:da:10:08:80:38:46:1a:25:
44:20:3d:a6:eb:bc:71:f7:02:13:fa:9a:4e:bd:87:84:b2:66:
ae:44:5b:65:43:fb:2b:27:d3:39:f5:30:8d:71:c9:e0:6c:d5:
c3:56:48:c5:be:36:48:7b:db:b4:61:6b:31:ea:99:9c:d5:7a:
31:fa:d1:8e:e8:c7:cf:f6:2a:99:aa:90:6f:d3:8a:2a:a0:e1:
78:a9:31:0b:0d:68:e4:81:d5:79:b5:60:ae:d0:50:4c:0a:33:
b7:e4:96:84:ec:a1:55:c2:be:3d:a9:e5:5f:c3:ce:f4:86:9c:
67:ce:75:76:16:2a:a3:00:f3:87:fb:df:40:1e:cc:bf:23:b9:
9f:a5:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:04 2025 by rpki-client